CVE-2019-5640: Rapid7 Nexpose Information Disclosure after logout

First published: Wed Nov 17 2021(Updated: )

Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available in the last webpage visited by previous user

Credit: cve@rapid7.con cve@rapid7.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/author
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/severity
• agent/weakness
• agent/title
• agent/references
• agent/event
• agent/description
• agent/first-publish-date
• agent/tags
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• vendor/rapid7
• canonical/rapid7 nexpose